5 ms·

No https in 2021?

• ilrwbwrkhv 5y ago
  No. In fact most websites don't need HTTPS and pointless data transfer. Wish we could go back a few years on this zeitgeist.
  • Xorlev 5y ago
    This is false. Just because the page content isn't sensitive, that doesn't mean that TLS is worthless. TLS prevents your run of the mill MITM scenarios. Like ISPs inserting ads (something Comcast actually did), or public wifi doing the same. Or worse, more malicious scripts. You could argue that all I'm really looking for in most cases is message integrity (signing), but if you're going to do that, you might as well just encrypt it too and avoid accidents where sensitive information is sent over encrypted channels.
  • pornel 5y ago
    Every visited HTTP website is a network vulnerability. It doesn't matter what is supposed to be on these sites. From security perspective they contain MITM attacker's content. They are effectively an API for issuing arbitrary commands to the browser. To shut down this attack API, all sites have to stop using HTTP, no exceptions.
  • noptd 5y ago
    Even if you disagree (and I do as well), downvotes are the wrong way to signal disagreement. Either invest in posting a response or move past it- there's no need to hide the comment from others. We're better than that, or at least we should be.